Collaborate Disseminate
There is a website which I want to audit. That site must have a concrete Virtualhost configuration because if you access to it using the domain name the website is shown, but if you use the ip address the website is not shown… Continue reading Metasploit. Is always replacing domain names with resolved ips on RHOST/RHOSTS?
I know that the browser’s default protocol to access any site is http:// when https:// is explicitly not mentioned, but even then if we browse to a website say www.facebook.com, the response header from the Facebook servers would have HSTS… Continue reading Why use HTTPS Everywhere when we have HSTS supported browsers?
If you use NextGEN Gallery, now would be a good time to update. Continue reading Researchers find “severe” flaw in WordPress plugin with 1 million installs
What plugins are there for Chrome, that would increase security while browsing the web?
For Firefox I have used NoScript, Flashblock, and AdBlock Plus, are there equivalents to these plugins for Chrome?
Several plugins I ha… Continue reading Plugins to increase security of Chrome? [on hold]
What plugins are there for Chrome, that would increase security while browsing the web?
For Firefox I have used NoScript, Flashblock, and AdBlock Plus, are there equivalents to these plugins for Chrome?
Several plugins I ha… Continue reading Plugins to increase security of Chrome? [on hold]
I was wondering if anyone else had come across this problem that myself and a colleague are facing with the SQLiPy plugin in Burpsuite Pro.
After downloading the latest standalone for jython, pointing BS to it and installin… Continue reading Burpsuite SQLiPy plugin no start button
I was wondering if anyone else had come across this problem that myself and a colleague are facing with the SQLiPy plugin in Burpsuite Pro.
After downloading the latest standalone for jython, pointing BS to it and installin… Continue reading Burpsuite SQLiPy plugin no start button
When you install a plugin in WordPress you can choose to activate or deactivate it.
Let’s say you have a plugin of which the latest version is vulnerable to XSS for example and you’re waiting for a security fix to be released. Should I di… Continue reading Are inactive vulnerable WordPress plugins still unsafe?
My cable was on the fritz this weekend and I had to visit a friend to watch HBO online. Something weird happened that has been bothering me.
I have disabled the Flash plugin on Chrome, since all websites that I use support … Continue reading Detecting disabled Chrome plugins using JavaScript
Mozilla fixed 13 security issues, including two critical vulnerabilities that could have led to spoofing and clickjacking, among other issues, when it updated Firefox to the latest build, Firefox 47, this week.
Continue reading Firefox 47 Fixes 13 Vulnerabilities, Removes Click-To-Activate Plugin Whitelist